square-authentication 6.0.4__py3-none-any.whl → 6.1.0__py3-none-any.whl

square_authentication/configuration.py

@@ -22,6 +22,9 @@ try:
     # environment
     config_str_host_ip = ldict_configuration["ENVIRONMENT"]["HOST_IP"]
     config_int_host_port = int(ldict_configuration["ENVIRONMENT"]["HOST_PORT"])
+    config_list_allow_origins = eval(
+        ldict_configuration["ENVIRONMENT"]["ALLOW_ORIGINS"]
+    )
     config_str_log_file_name = ldict_configuration["ENVIRONMENT"]["LOG_FILE_NAME"]
     config_str_secret_key_for_access_token = ldict_configuration["ENVIRONMENT"][
         "SECRET_KEY_FOR_ACCESS_TOKEN"

square_authentication/data/config.ini

@@ -4,6 +4,7 @@ MODULE_NAME = square_authentication
 [ENVIRONMENT]
 HOST_IP = 0.0.0.0
 HOST_PORT = 10011
+ALLOW_ORIGINS = ["http://localhost:10011"]
 
 LOG_FILE_NAME = square_authentication
 

square_authentication/data/config.testing.ini

@@ -4,6 +4,7 @@ MODULE_NAME = square_authentication
 [ENVIRONMENT]
 HOST_IP = 0.0.0.0
 HOST_PORT = 10011
+ALLOW_ORIGINS = ["http://localhost:10011"]
 
 LOG_FILE_NAME = square_authentication
 

square_authentication/main.py

@@ -13,6 +13,7 @@ from square_authentication.configuration import (
     config_str_module_name,
     config_str_ssl_key_file_path,
     config_str_ssl_crt_file_path,
+    config_list_allow_origins,
 )
 from square_authentication.routes import core, utility, profile
 
@@ -21,7 +22,7 @@ app = FastAPI()
 app.add_middleware(
     CORSMiddleware,
     allow_credentials=True,
-    allow_origins=["*"],
+    allow_origins=config_list_allow_origins,
     allow_methods=["*"],
     allow_headers=["*"],
 )

square_authentication/messages.py

@@ -5,6 +5,7 @@ messages = {
     "INCORRECT_USERNAME": "the username you entered does not exist.",
     "INCORRECT_PASSWORD": "the password you entered is incorrect. please try again.",
     "INCORRECT_USER_ID": "the user ID you provided does not exist or is invalid.",
+    "USERNAME_INVALID": "username must start and end with a lowercase letter and can include only lowercase letters, digits, underscores, or hyphens. no spaces, no dots, and no consecutive special characters.",
     "USERNAME_ALREADY_EXISTS": "the username you entered is already taken. please choose a different one.",
     "INCORRECT_ACCESS_TOKEN": "the access token provided is invalid or expired.",
     "INCORRECT_REFRESH_TOKEN": "the refresh token provided is invalid or expired.",

square_authentication/routes/core.py

@@ -1,4 +1,5 @@
 import copy
+import re
 from datetime import datetime, timedelta, timezone
 from typing import Annotated, List
 
@@ -67,6 +68,22 @@ async def register_username_v0(
         validation
         """
         # validation for username
+        # ^(?!.*[_-]{2})           # no consecutive _ or -
+        # [a-z]                    # must start with a lowercase letter
+        # (?:[a-z0-9_-]{1,18})     # 1–18 of lowercase, digits, _ or -
+        # [a-z]$                   # must end with a lowercase letter
+        username_pattern = re.compile(r"^(?!.*[._-]{2})[a-z][a-z0-9_-]{1,18}[a-z]$")
+        if not username_pattern.match(username):
+            output_content = get_api_output_in_standard_format(
+                message=messages["USERNAME_INVALID"],
+                log=f"username '{username}' is invalid. it must start and end with a letter, "
+                f"contain only lowercase letters, numbers, underscores, or hyphens, "
+                f"and not have consecutive separators.",
+            )
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail=output_content,
+            )
         local_list_response_user_creds = (
             global_object_square_database_helper.get_rows_v0(
                 database_name=global_string_database_name,
@@ -1098,6 +1115,25 @@ async def update_username_v0(
             )
         user_id = local_dict_access_token_payload["user_id"]
 
+        # validation for username
+        # ^(?!.*[_-]{2})           # no consecutive _ or -
+        # [a-z]                    # must start with a lowercase letter
+        # (?:[a-z0-9_-]{1,18})     # 1–18 of lowercase, digits, _ or -
+        # [a-z]$                   # must end with a lowercase letter
+        new_username = new_username.lower()
+        username_pattern = re.compile(r"^(?!.*[._-]{2})[a-z][a-z0-9_-]{1,18}[a-z]$")
+        if not username_pattern.match(new_username):
+            output_content = get_api_output_in_standard_format(
+                message=messages["USERNAME_INVALID"],
+                log=f"username '{new_username}' is invalid. it must start and end with a letter, "
+                f"contain only lowercase letters, numbers, underscores, or hyphens, "
+                f"and not have consecutive separators.",
+            )
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail=output_content,
+            )
+
         # validate user_id
         local_list_user_response = global_object_square_database_helper.get_rows_v0(
             database_name=global_string_database_name,

{square_authentication-6.0.4.dist-info → square_authentication-6.1.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: square_authentication
-Version: 6.0.4
+Version: 6.1.0
 Summary: authentication layer for my personal server.
 Home-page: https://github.com/thepmsquare/square_authentication
 Author: thePmSquare
@@ -53,6 +53,16 @@ pip install square_authentication
 
 ## changelog
 
+### v6.1.0
+
+- add validation to username in register_username_v0 and update_username_v0.
+- add test cases for register_username_v0.
+
+### v6.0.5
+
+- env
+    - add ALLOW_ORIGINS
+
 ### v6.0.4
 
 - mock ini file for pytest.

{square_authentication-6.0.4.dist-info → square_authentication-6.1.0.dist-info}/RECORD

@@ -1,19 +1,19 @@
 square_authentication/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-square_authentication/configuration.py,sha256=o-fx1zLipECyEQQm7jtMR2hYBW3gZ6uyFojSzuJ7Pqs,4475
-square_authentication/main.py,sha256=zADc2vmV8yDylmbihj4FzLDEs5b-9nItFoB5c4AoKGk,1704
-square_authentication/messages.py,sha256=vhcl4bw8Ar1npiErjGh3kkNPmW1rmDRtf6rKn5JF8W8,1364
-square_authentication/data/config.ini,sha256=mJUGsEMqpAOVrHW3KmiZzH92340DkX69wDG4jBv1YWw,1111
-square_authentication/data/config.testing.ini,sha256=wW727RRUgQl4euKJ17uLqlVJTrQ6ISER_9GA5GgW83o,1158
+square_authentication/configuration.py,sha256=zdlBY7xyMoEl8fc2whpXqsILvvrNnFGC1Yry_pB6FaI,4579
+square_authentication/main.py,sha256=nhkv8U4E9b7VIH7Aaj8iMWIwA4VIL-vzRXjZaYEFWPw,1755
+square_authentication/messages.py,sha256=WVZtWBctx-YK1xGo97DFAMkSgCZpDEd9gABBSqlvd58,1575
+square_authentication/data/config.ini,sha256=Mayh9AhTBZd8i08Y--ClZuDEjJjfvnfKQmtqablzXOA,1154
+square_authentication/data/config.testing.ini,sha256=KB4PMPZ6a9yJGPXYJWwKlYcNET1Au3TQdJHQyngbZUA,1201
 square_authentication/pydantic_models/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 square_authentication/pydantic_models/core.py,sha256=qeNETcJv7mnRKGhATOW2bg0NlHuyzvot1dZ1b1qqhwU,610
 square_authentication/routes/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-square_authentication/routes/core.py,sha256=Ui2kJI3DHK1tsb4_cCle8iurZlU__O_nptk2-YLZ2vg,56778
+square_authentication/routes/core.py,sha256=Gu7Z6gcQqKqXOwT-uHYWBJHWvJ_CVVT7BQC-afhwGyU,58717
 square_authentication/routes/profile.py,sha256=3b-PtMaD9cxvf112MOn9rPu5F2KG4sRxAbuPvll8dUU,6216
 square_authentication/routes/utility.py,sha256=KDr8KdkT0jAGPjfP-b5XXYG7p49WU7J1FiK6oSIckQI,1779
 square_authentication/utils/__init__.py,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
 square_authentication/utils/encryption.py,sha256=WakaiEAgWpTJltxBzqOtv81_DCDKfzJqt60fWSPoNvo,2027
 square_authentication/utils/token.py,sha256=t-RPBY4cYyT1ro3lkLBTOy2BeRGBfluBVBivL5DLmDg,680
-square_authentication-6.0.4.dist-info/METADATA,sha256=xvcPTkLQ-Z-DREOI_0tmIlwsu-vXuT8skKTfQ8vJKBA,5158
-square_authentication-6.0.4.dist-info/WHEEL,sha256=0CuiUZ_p9E4cD6NyLD6UG80LBXYyiSYZOKDm5lp32xk,91
-square_authentication-6.0.4.dist-info/top_level.txt,sha256=wDssVJIl9KIEJPj5rR3rv4uRI7yCndMBrvHd_6BGXQA,22
-square_authentication-6.0.4.dist-info/RECORD,,
+square_authentication-6.1.0.dist-info/METADATA,sha256=Q6YHK0bIbx0Zs1AkqRjwJZG3aXNBMQdsBdtp7n-GfhE,5334
+square_authentication-6.1.0.dist-info/WHEEL,sha256=QZxptf4Y1BKFRCEDxD4h2V0mBFQOVFLFEpvxHmIs52A,91
+square_authentication-6.1.0.dist-info/top_level.txt,sha256=wDssVJIl9KIEJPj5rR3rv4uRI7yCndMBrvHd_6BGXQA,22
+square_authentication-6.1.0.dist-info/RECORD,,

{square_authentication-6.0.4.dist-info → square_authentication-6.1.0.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (80.3.1)
+Generator: setuptools (80.6.0)
 Root-Is-Purelib: true
 Tag: py3-none-any